This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD1DB9ED9F740B569671EA08376409CA7C9D760217CC109B95D7AD4D731C1271/0/34352e3138342e32302e302f32322d3234203d3e20323639373739.roa
File:                     34352e3138342e32302e302f32322d3234203d3e20323639373739.roa (raw, json)
Hash identifier:          qoqCH7oInnP94XDrrvzNLc2Kx3VOHmTzKfqRPum5KUI=
Subject key identifier:   DC:FF:CB:AA:82:B6:D7:15:A0:14:56:FD:4E:0C:E8:32:AC:E8:10:17
Certificate issuer:       /CN=8FCCFBBE6DE0FDE4939CA30A509504E052D77675
Certificate serial:       17612D948A33FB3B6ACB3F084258075CD2FCE192
Authority key identifier: 8F:CC:FB:BE:6D:E0:FD:E4:93:9C:A3:0A:50:95:04:E0:52:D7:76:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FCCFBBE6DE0FDE4939CA30A509504E052D77675.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD1DB9ED9F740B569671EA08376409CA7C9D760217CC109B95D7AD4D731C1271/0/34352e3138342e32302e302f32322d3234203d3e20323639373739.roa
Signing time:             Tue 06 Jan 2026 19:48:01 +0000
ROA not before:           Tue 06 Jan 2026 19:43:01 +0000
ROA not after:            Tue 05 Jan 2027 19:48:01 +0000
asID:                     269779
IP address blocks:        45.184.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD1DB9ED9F740B569671EA08376409CA7C9D760217CC109B95D7AD4D731C1271/0/8FCCFBBE6DE0FDE4939CA30A509504E052D77675.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD1DB9ED9F740B569671EA08376409CA7C9D760217CC109B95D7AD4D731C1271/0/8FCCFBBE6DE0FDE4939CA30A509504E052D77675.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FCCFBBE6DE0FDE4939CA30A509504E052D77675.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:61:2d:94:8a:33:fb:3b:6a:cb:3f:08:42:58:07:5c:d2:fc:e1:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FCCFBBE6DE0FDE4939CA30A509504E052D77675
        Validity
            Not Before: Jan  6 19:43:01 2026 GMT
            Not After : Jan  5 19:48:01 2027 GMT
        Subject: CN=DCFFCBAA82B6D715A01456FD4E0CE832ACE81017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:74:1f:04:87:db:31:87:96:e4:d2:49:8d:a7:
                    9f:c9:3a:37:71:0c:29:2e:c8:a2:e9:54:af:45:24:
                    88:f5:15:0f:58:35:8a:56:ad:9b:9e:9f:9e:ee:63:
                    da:74:dd:a9:4f:e1:ad:a5:fd:86:29:7f:bd:b0:eb:
                    fe:8e:68:1f:73:60:7a:71:59:f1:75:99:96:11:5f:
                    3d:d6:03:72:1d:17:be:f4:1a:6c:e6:e5:1a:00:e7:
                    72:36:2a:a1:1a:e6:2c:15:1c:c3:dc:ae:fb:8c:56:
                    1a:61:c7:f8:7d:a4:02:e1:fe:c3:98:17:67:e4:d4:
                    66:7c:d8:50:d3:49:57:f6:9e:7c:92:6f:80:ff:14:
                    0a:14:e2:17:94:a7:5d:7c:be:d2:e7:84:37:72:43:
                    4a:ef:17:a0:e0:12:54:44:1e:9f:22:be:08:78:b6:
                    fb:89:d1:3a:4b:fa:91:77:07:0a:97:0f:36:f4:0c:
                    98:61:c9:fb:e6:61:cb:5c:ce:d2:4b:fb:86:e3:35:
                    8c:cb:5b:2c:5e:04:4b:66:41:85:54:11:6c:8a:b9:
                    9a:e0:c2:30:45:82:09:5a:68:8d:79:d7:0a:04:d5:
                    53:96:68:5f:e4:f1:4f:9a:33:0e:f1:71:be:0d:6e:
                    c9:2b:c8:fe:f6:6e:e5:3a:8b:4c:59:31:96:d5:9c:
                    d5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:FF:CB:AA:82:B6:D7:15:A0:14:56:FD:4E:0C:E8:32:AC:E8:10:17
            X509v3 Authority Key Identifier:
                keyid:8F:CC:FB:BE:6D:E0:FD:E4:93:9C:A3:0A:50:95:04:E0:52:D7:76:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD1DB9ED9F740B569671EA08376409CA7C9D760217CC109B95D7AD4D731C1271/0/8FCCFBBE6DE0FDE4939CA30A509504E052D77675.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FCCFBBE6DE0FDE4939CA30A509504E052D77675.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD1DB9ED9F740B569671EA08376409CA7C9D760217CC109B95D7AD4D731C1271/0/34352e3138342e32302e302f32322d3234203d3e20323639373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:5e:af:84:43:80:8e:e6:c0:98:8a:ad:27:ba:49:48:b5:53:
         e8:39:f2:c7:ed:db:07:3a:ba:66:8b:f0:ac:99:22:60:5a:3f:
         bf:6c:2f:bb:99:e7:7d:24:47:ee:39:8c:a5:ae:d6:d5:c3:7c:
         f9:6f:1d:59:de:b6:31:8b:d8:c6:76:d1:05:a9:23:df:e6:2c:
         9c:1c:80:97:d6:4c:7a:0a:a1:12:01:f2:25:2d:2d:a4:91:0b:
         be:79:a9:73:d5:4b:6e:ab:7c:04:8e:07:43:96:c4:da:b7:b3:
         5a:c8:56:62:73:ce:16:1f:a4:8a:e0:8a:34:5f:0c:1d:d1:b1:
         cc:01:8f:d8:77:7a:d6:ca:73:ce:39:9d:1f:a2:37:7e:f7:c1:
         bc:71:7e:0d:5f:1f:2b:a2:7f:ea:7b:cb:8b:57:83:c8:b5:33:
         92:95:a6:76:9e:e4:3d:5e:6d:44:f3:75:60:f0:65:20:26:99:
         36:59:4d:d6:ee:0b:11:aa:29:18:35:eb:09:15:cf:f9:f0:98:
         9b:33:64:80:9d:de:b1:e4:7f:9b:f2:68:c2:33:6e:df:16:ee:
         96:10:3b:00:77:de:0d:07:63:0b:cf:07:6f:56:fb:39:00:ce:
         f4:8b:3a:d1:48:2d:e6:c7:29:7a:aa:14:67:ad:cc:33:1b:81:
         b2:25:36:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:09:22 2026 by rpki-client